Hong Kong SME data guide · Free readiness checklist
Commercial credit data for SME lending in Hong Kong: CCRA and CDI
Two different things are called credit data for businesses. One is a credit-reference database of an SME’s borrowing record. The other is a consent-based exchange that lets a financial institution obtain an SME’s own commercial data. Knowing which is which decides what a lender can connect to.
Core definitions
Put similar concepts in the right place
Each component solves a different problem. Complete lending operations depend on clear data and workflow hand-offs.
| Item | What it does in practice |
|---|---|
| 01CCRA | A database of SME indebtedness and credit history, announced in 2004 and run for the industry associations by a service provider they appointed. |
| 02CDI | A consent-based data infrastructure launched by the HKMA. An SME authorises a data provider to pass its commercial data to a financial institution, for a purpose such as a loan application. CDI keeps event logs and does not store the data itself. |
| 03Data owner (the SME) | The business whose data is shared. Data moves only after it gives consent. |
| 04Data provider | A commercial entity that holds a digital footprint of the SME. At CDI’s launch the data covered e-trade declaration, e-commerce, supply chain, payment and credit reference. |
| 05Data consumer | The financial institution that uses the data, for example in loan approval. |
| 06The lender’s own system | Where the data lands, is matched to the company file, is reviewed by staff and is kept with an audit trail. |
Workflow
How commercial data should flow into an SME file
- 01
Identify the company
Match the applicant to one legal entity using its registration number, so data attaches to the right file.
- 02
Record consent
Keep the consent, its scope, its date and who obtained it.
- 03
Obtain the data
Request data only from sources the institution has agreed access to, through their approved channels.
- 04
Label the source
Show on the file which figures came from a data source, which from documents and which from the applicant.
- 05
Review and reconcile
A credit officer compares external data with statements and bank accounts, and records any difference.
- 06
Keep the evidence
Retain what was requested, when, by whom and why.
Printable worksheet
Free: 10-point commercial-data readiness checklist
Use it before you scope any connection to an external data source. This is an operational self-assessment, not legal advice.
Practical evaluation
Three points buyers often miss
Access depends on eligibility
The CCRA served members of two banking associations at launch, and CDI describes its data consumers as financial institutions. A non-bank lender should ask each operator whether it can take part.
An external report is one input
It does not replace statements, bank accounts or the credit officer’s judgement.
A connection is project work
Each source has its own onboarding, consent flow and technical interface. Plan it as a project with the data provider, not as a setting.
Frequently asked questions
Quick answers
What is the CCRA in Hong Kong?
The Commercial Credit Reference Agency holds information about the indebtedness and credit history of SMEs. At its 2004 launch it was run by Dun & Bradstreet (HK) as the service provider appointed by the industry associations, for members of the Hong Kong Association of Banks and the DTC Association. Check the current operator and membership rules before relying on this.
What is the Commercial Data Interchange?
CDI is the HKMA’s consent-based financial data infrastructure. An SME gives consent for a data provider to pass its data to a financial institution. At the official launch in October 2022, 23 banks with material SME business and 10 data providers took part.
How much is CDI used?
The Digital Policy Office reports that by March 2026 CDI had 27 banks and 17 data providers, and had supported over 95,000 loan applications and reviews, with estimated credit approvals above HK$76.7 billion.
Can a money lender use the CCRA or CDI?
Eligibility is set by each operator. At its launch the CCRA served members of two banking associations, and CDI describes its consumers as financial institutions. A licensed money lender should ask the operators directly.
Is Covenant Desk a credit reference agency?
No. Covenant Desk is lending operations software. It does not issue credit reports.
Primary sources
Official sources and editorial note
This guide reflects official material available on the review date. Requirements can change; each institution should check the latest licence conditions and obtain legal or compliance advice. This page is not legal advice. Read our editorial and corrections policy.
- Hong Kong Monetary Authority: launch of the Commercial Credit Reference Agency (26 October 2004)
- Hong Kong Monetary Authority: about the Commercial Data Interchange (CDI)
- Hong Kong Monetary Authority: official launch of the Commercial Data Interchange (24 October 2022)
- Digital Policy Office: how CDI is breaking down data barriers for SME financing
Next step
Plan commercial data into your SME file.
Talk to us about your SME origination workflow, or try the Covenant Desk platform it is built on.
Covenant Desk is lending operations software. It does not provide loans, issue credit reports or replace the lender’s final credit decision.